Please send me your working vBulletin RCE / shell upload zeroday. You can see from the address that I have paid for it, and wish for it to be delivered to joshzerlan@gmx.com. This is recorded publicly on the blockchain, you cannot dispute I have not paid. Upon asking, you have asked to add me on Jabber, which is mentioned as an official support channel.

I have been in contact with other victims who have been defrauded by you, and you have tried to send them wallet.dat stealers. We have been able to find these victims by accessing the server you uploaded their appdata details to.

You in jabber claim that you have owned Macrumors, however this is clearly not the case as (1) the version on Macrumors is not what your exploit claims to target and (2) the actual hacker has posted evidence that is to the contradictory, saying "1337day didn't do shit" along with a partial dump for proof.

You have one simple brain dead way to clear your reputation - send me the exploit to joshzerlan@gmx.com, and to all the other victims. However, it is clear that you do not have one. Your 0day has been sold many, many times yet there has been ZERO instances where a vBulletin 0day has been used to exploit a forum in the past week. All of recent vB exploits were not from a supposed 0day but through password compromise, other already released exploit, install directory, etc.

1337day are scammers - you've built up a reputation, but you've decided to cash it in by making up fake exploits that you do not have, and cannot deliver.

Made payments. Thanks. If you haven't got paid pm me again.

keep the sites coming. preferably community like sites instead of YET ANOTHER FORUM about ham radio.

bump

exactly.

Doesn't example why it's in the mod hints thread.

or why theymos reads / skims nearly EVERY single PM and clicks on links that are totally inappropriate.

Updates

Due to difficulties with my previous hosting provider, I have not been able to get any work done. Payments will be made in 3 days. SMF 2.x versions will not be paid (if you sent them before I removed it from the post, you will be paid).

Everyone will be paid. I am also giving bonuses to community sites over boring sites.

Already paid to rocketcoins and elena_extraordinaire

Note that duplicates will obviously not be paid (have not had a duplicate so far)

Your 550 member forum is not worth the time, sorry.

Ukyo already scammed you.

Using my daily bump. Thanks.

I'm giving you Bitcoins for simply notifying me of old SMF installations.

Supported Versions:
SMF 1.x branch: SMF 1.1.17 or earlier

Note: TIGSOURCE & whatifmodellers exempt.

>750 users && >1500 topics && >10000 posts: $3 in BTC
>2000 users && >3000 topics && >20000 posts: $6 in BTC
>4000 users && >6000 topics && >40000 posts: $9 in BTC
>6000 users && >9000 topics && >60000 posts: $12 in BTC
>8000 users && >12000 topics && >80000 posts: $15 in BTC
>10k users && >15k topics && > 100k posts: $20 in BTC

(you can see how many users, topics, posts a smf forum as at the bottom of the page)

For example, a forum with 4424 users, 4526 topics and 44850 posts will get $6 (the limiting factor in this example topics).

You must also supply the *userID* and *username* of an administrator. Make sure it's actually the username, not just someone's display name.

You can do this job as many times as you wish. Just PM me with links to forums, admin userid&username, and your BTC address. It's that easy.

No discussion in this thread about the purpose of this job. Any posts relating to this will be deleted.

I'm interested in purchasing 0days and exploits / vulnerabilities of popular PHP scripts such as:

phpBB
vBulletin
SMF
Wordpress
myBB

etc etc

Please only contact if you have serious & private exploits. I can offer up to four digits if it's real good. If not, I may be interested anyway. The 0day is used for ethical purposes only such as patching high value sites against it. It will not be used for exploitation (unless the cause is morally justifiable)

Proof: I've paid 10 BTC ($7200) for a vBulletin "0day" that turned out to be fake. See my 1337day scam accusation thread. Note that after this incident I will /not/ go first, but if you honor your word I will honor mine.

Contact: please email joshzerlan@gmx.com

can confirm this screenie is legit, their site exposed their dev environment.

1) it's 10 BTC
2) it's so other people know and don't send any more money to this scammer.
3) I'm not expecting anything back

I've been in contact with another person who has been scammed.



exactly not everything is black and white.

1337day.com is a scam site. They do not have the 0days they are selling for.

Their address is http://blockchain.info/address/1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1

As you can see I purchased the vBulletin 0day with this transaction:

 vBulletin v4.x.x and 5.x.x Shell Upload / Remote Code Execute (0day)

https://blockchain.info/tx/2380e1187dac2c76ddf7430ecf5a0573bc415f595f01e46796c8acf201cfb4f6

I received an email from admin@1337day.com asking for jabber or skype. Here's our logs: (timestamps removed for my anonymity)


1337day
here
 
joshzerlan@jwchat.org
ok, so what about the vBulletin 0day?    

1337day
Hello    

joshzerlan@jwchat.org
Hi   

1337day
Bro please tomorrow , at the moment i back home
today or tomorrow
 
joshzerlan@jwchat.org
what's with the youtube video saying you scammed someone over the MS office 0day?   

1337day
I waited for you all day
this man make video to get stuff for free
many kids idiots
 
joshzerlan@jwchat.org
okay, when will you be able to disclose it?
(not sure what time zone you are in)
 
1337day
today   

joshzerlan@jwchat.org
ok. I'll be available here. thanks   

1337day
respect
add me
 
joshzerlan@jwchat.org
added   

1337day
you use windows?   

joshzerlan@jwchat.org
no
you responsible for macrumors?
 
1337day
yes
you want database?)
 
joshzerlan@jwchat.org
that wasn't done through a 0day
that was done through XSS
 
1337day
no)   

joshzerlan@jwchat.org
http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day
)
my screen)
do you want this database?
 
joshzerlan@jwchat.org
it would make me
more comfortable if i know you actually have a 0day
 
1337day
3 btc and i give you database)
interest?
 
joshzerlan@jwchat.org
show me some proof first   

1337day
proof? you send me 10 btc and you want proof?   

joshzerlan@jwchat.org
you want me to send more   

joshzerlan@jwchat.org
so?
you don't have the 0day.


1337day
and?   

joshzerlan@jwchat.org
posting about scam reports on all the forums now
i'll make sure the #2 search result for 1337day is a scam report
 
1337day
show me   

-----

As you can see, they claim responsibility for the MacRumors attack when it was done by someone using the name 'lol'. That attack was through compromising a moderator account, and making a XSS announcement. The actual hacker of MacRumors has said 1337 didn't do shit with proof:

http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day are scammers - do not pay them.

(And yes, this is a hacked account).

Knew he's a scammer

Yes, they can be bought with a credit card.

Amazon GCs generally trade at a discount. I'm happy to do this deal for 0.2 BTC / $30

PM me for details

you are trying to mine on a litecoin pool using bitcoin miner..

Why are you doing this?